Senior Level Internal Auditor Jobs
Senior level internal auditor jobs place experienced professionals in charge of audit program direction, risk assessment ownership, and the cross-functional teams executing complex engagements. Openings are concentrated in Banking & Financial Services, Investment & Asset Management, and Electronics & Hardware, with a 42% remote or hybrid share, and employers like Goldman Sachs, Blue Shield of California, and KIOXIA hiring at this level now.
Find JobsOverview
Showing 5 of 21+ Senior Level Internal Auditor jobs
Your Role
The Consultant, Internal Audit (Technology / IT Audit) independently leads and executes complex audit and advisory engagements across technology environments. This role serves as a subject matter expert in IT audit and cybersecurity while providing strategic insight and guidance to management. The Consultant is accountable for delivering end-to-end audit work and acts as a trusted advisor to Director-level leadership and stakeholders.
Your Work
In this role, you will:
- Perform non-technical and technical IT audits with minimal supervision
- Define the scope of work for each audit
- Evaluate the design and effectiveness of applied controls for processes, systems, networks, and applications in accordance with laws, regulations, policies, procedures, and standards
- Support risk assessments and development of audit plans for data and AI governance areas
- Review controls over AI-enabled business processes, including data sourcing, model outputs, decisioning logic, and human oversight mechanisms
- Leads corrective/ preventive action planning related to transactional audits
- Assess design and operating effectiveness of controls related to intellectual property (IP) protection, including source code repositories, model artifacts, proprietary algorithms, and data assets
- Perform audits of DevSecOps pipelines, including CI/CD tooling, automated testing, code promotion, and segregation of duties across development environments
- Evaluate risks related to use of open-source software, third-party libraries, and external AI services, including licensing compliance, security vulnerabilities, and data leakage
- Analyze risks associated with data used in software and AI development, including data governance, quality, lineage, privacy, and regulatory compliance (e.g., HIPAA data considerations)
- Assess AI governance frameworks, including intake, approval, ethical review, monitoring, incident management, and model retirement processes.
- Complete detailed audit work papers that describe the scope of audit work performed, results of tests conducted, the controls in place, and the control or compliance deficiencies noted, using sound judgment
Your Knowledge and Experience
- Requires a bachelor’s degree or equivalent experience
- Requires a minimum of 7 years of prior related experience
- Advanced understanding of technology, IT concepts and principles and the ability to leverage this knowledge to recommend effective solutions
- Advanced knowledge of security software programs and implementation
- Advanced knowledge of TCP/IP and networking (LAN, WAN and Wireless)
- Advanced knowledge of key information technology risks and controls and available technology-based assessment techniques
- Advanced knowledge of major risk assessment methodologies and security frameworks such as ISO, COBIT, COSO
- Advanced knowledge of major operating systems such as UNIX (e.g., Solaris) and Windows servers (2000, 2003)
- Advanced knowledge of major security tools and technologies such as intrusion detection and prevention systems, data loss prevention and identify management
- Advanced knowledge of Security Incident Management, Business Continuity/Disaster Recovery, Personnel Security, Physical and Environmental Security processes
- Working knowledge of AI tools, models, and platforms (e.g., generative AI, ML systems), including associated risks, controls, and governance consideration
- Knowledge of computer forensics, penetration testing and hacking techniques
- In-depth knowledge of security log analysis
- Strong knowledge of security regulations including HIPAA / HITECH, SOX, PCI, SB1386, AB1950
ABOUT THE TEAM
About Blue Shield of California and the Ascendiun Family of Companies
As of January 2025, Blue Shield of California became a subsidiary of Ascendiun. Ascendiun is a nonprofit corporate entity that is the parent to a family of organizations including Blue Shield of California and its subsidiary, Blue Shield of California Promise Health Plan; Altais, a clinical services company; and Stellarus, a company designed to scale healthcare solutions. Together, these organizations are referred to as the Ascendiun Family of Companies.
At Ascendiun, we believe in a brighter future for healthcare. As the parent to a family of four innovative healthcare companies, we’re reimagining what’s possible. Ascendiun is guided by the goal of transforming a dysfunctional American health care system into one worthy of our family and friends and sustainably affordable for everyone.
To achieve our mission, we foster an environment where all employees can thrive and contribute fully to address the needs of the various communities we serve. We are committed to creating and maintaining a supportive workplace that upholds our values and advances our goals.
Our Values:
- Honest . We hold ourselves to the highest ethical and integrity standards. We build trust by doing what we say we're going to do and by acknowledging and correcting where we fall short.
- Human . We strive to listen and communicate effectively, and showing empathy by understanding others’ perspectives.
- Courageous . We stand up for what we believe in and are committed to the hard work necessary to achieve our ambitious goals.
Our Workplace Model:
We believe in fostering a workplace environment that balances purposeful in-person collaboration with flexibility - providing clear expectations while respecting the diverse needs of our workforce. Our workplace model is designed around intentional in-person interaction, collaboration, connection, creativity and flexibility:
For most teams, this means coming into the office two days per week.
Employees living more than 50 miles from an office location, out of state employees, and employees in certain member-facing roles should work with their manager to determine in-office time based on business need.
For employees with medical conditions that may impact their ability to work in-office, we are committed to engaging in an interactive process and providing reasonable accommodations to ensure their work environment is conducive to their success and well-being.
The Company reserves the right to require more presence in the office based on business needs, and requirements are subject to change with periodic reviews.
Physical Requirements:
Office Environment - roles involving part to full time schedule in Office Environment. Based in our physical offices and work from home office/deskwork - Activity level: Sedentary, frequency most of work day.
Equal Employment Opportunity:
External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.
Your Role
The Consultant, Internal Audit (Technology / IT Audit) independently leads and executes complex audit and advisory engagements across technology environments. This role serves as a subject matter expert in IT audit and cybersecurity while providing strategic insight and guidance to management. The Consultant is accountable for delivering end-to-end audit work and acts as a trusted advisor to Director-level leadership and stakeholders.
Your Work
In this role, you will:
- Perform non-technical and technical IT audits with minimal supervision
- Define the scope of work for each audit
- Evaluate the design and effectiveness of applied controls for processes, systems, networks, and applications in accordance with laws, regulations, policies, procedures, and standards
- Support risk assessments and development of audit plans for data and AI governance areas
- Review controls over AI-enabled business processes, including data sourcing, model outputs, decisioning logic, and human oversight mechanisms
- Leads corrective/ preventive action planning related to transactional audits
- Assess design and operating effectiveness of controls related to intellectual property (IP) protection, including source code repositories, model artifacts, proprietary algorithms, and data assets
- Perform audits of DevSecOps pipelines, including CI/CD tooling, automated testing, code promotion, and segregation of duties across development environments
- Evaluate risks related to use of open-source software, third-party libraries, and external AI services, including licensing compliance, security vulnerabilities, and data leakage
- Analyze risks associated with data used in software and AI development, including data governance, quality, lineage, privacy, and regulatory compliance (e.g., HIPAA data considerations)
- Assess AI governance frameworks, including intake, approval, ethical review, monitoring, incident management, and model retirement processes.
- Complete detailed audit work papers that describe the scope of audit work performed, results of tests conducted, the controls in place, and the control or compliance deficiencies noted, using sound judgment
Your Knowledge and Experience
- Requires a bachelor’s degree or equivalent experience
- Requires a minimum of 7 years of prior related experience
- Advanced understanding of technology, IT concepts and principles and the ability to leverage this knowledge to recommend effective solutions
- Advanced knowledge of security software programs and implementation
- Advanced knowledge of TCP/IP and networking (LAN, WAN and Wireless)
- Advanced knowledge of key information technology risks and controls and available technology-based assessment techniques
- Advanced knowledge of major risk assessment methodologies and security frameworks such as ISO, COBIT, COSO
- Advanced knowledge of major operating systems such as UNIX (e.g., Solaris) and Windows servers (2000, 2003)
- Advanced knowledge of major security tools and technologies such as intrusion detection and prevention systems, data loss prevention and identify management
- Advanced knowledge of Security Incident Management, Business Continuity/Disaster Recovery, Personnel Security, Physical and Environmental Security processes
- Working knowledge of AI tools, models, and platforms (e.g., generative AI, ML systems), including associated risks, controls, and governance consideration
- Knowledge of computer forensics, penetration testing and hacking techniques
- In-depth knowledge of security log analysis
- Strong knowledge of security regulations including HIPAA / HITECH, SOX, PCI, SB1386, AB1950
ABOUT THE TEAM
About Blue Shield of California and the Ascendiun Family of Companies
As of January 2025, Blue Shield of California became a subsidiary of Ascendiun. Ascendiun is a nonprofit corporate entity that is the parent to a family of organizations including Blue Shield of California and its subsidiary, Blue Shield of California Promise Health Plan; Altais, a clinical services company; and Stellarus, a company designed to scale healthcare solutions. Together, these organizations are referred to as the Ascendiun Family of Companies.
At Ascendiun, we believe in a brighter future for healthcare. As the parent to a family of four innovative healthcare companies, we’re reimagining what’s possible. Ascendiun is guided by the goal of transforming a dysfunctional American health care system into one worthy of our family and friends and sustainably affordable for everyone.
To achieve our mission, we foster an environment where all employees can thrive and contribute fully to address the needs of the various communities we serve. We are committed to creating and maintaining a supportive workplace that upholds our values and advances our goals.
Our Values:
- Honest . We hold ourselves to the highest ethical and integrity standards. We build trust by doing what we say we're going to do and by acknowledging and correcting where we fall short.
- Human . We strive to listen and communicate effectively, and showing empathy by understanding others’ perspectives.
- Courageous . We stand up for what we believe in and are committed to the hard work necessary to achieve our ambitious goals.
Our Workplace Model:
We believe in fostering a workplace environment that balances purposeful in-person collaboration with flexibility - providing clear expectations while respecting the diverse needs of our workforce. Our workplace model is designed around intentional in-person interaction, collaboration, connection, creativity and flexibility:
For most teams, this means coming into the office two days per week.
Employees living more than 50 miles from an office location, out of state employees, and employees in certain member-facing roles should work with their manager to determine in-office time based on business need.
For employees with medical conditions that may impact their ability to work in-office, we are committed to engaging in an interactive process and providing reasonable accommodations to ensure their work environment is conducive to their success and well-being.
The Company reserves the right to require more presence in the office based on business needs, and requirements are subject to change with periodic reviews.
Physical Requirements:
Office Environment - roles involving part to full time schedule in Office Environment. Based in our physical offices and work from home office/deskwork - Activity level: Sedentary, frequency most of work day.
Equal Employment Opportunity:
External hires must pass a background check/drug screen. Qualified applicants with arrest records and/or conviction records will be considered for employment in a manner consistent with Federal, State and local laws, including but not limited to the San Francisco Fair Chance Ordinance. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, national origin, sexual orientation, gender identity, protected veteran status or disability status and any other classification protected by Federal, State and local laws.
See All 21 Senior Level Internal Auditor Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Level Internal Auditor Job Market
Who's Hiring
- Goldman Sachs3
- Blue Shield of California2
- KIOXIA1
- L3Harris1
- M&T Bank1
Top Industries Hiring
- Banking & Financial Services4
- Investment & Asset Management4
- Electronics & Hardware2
- Government & Public Sector2
- Aerospace & Defense1
Senior Level Internal Auditor Jobs: Frequently Asked Questions
How do I get a senior level internal auditor job?
Employers at this level look for candidates who have owned the full audit lifecycle, not just contributed to it. Demonstrated experience leading risk-based audit plans, presenting findings to executive stakeholders, and mentoring junior staff gives candidates a clear edge. Certifications like CIA or CPA strengthen your profile, and a history of improving control frameworks or audit methodology shows the strategic ownership these roles require.
Which companies hire senior level internal auditors?
Companies hiring senior level internal auditors right now include Goldman Sachs, Blue Shield of California, and KIOXIA, based on current listings on Migrate Mate as of July 2026. Hiring at this level comes from large publicly traded corporations, regulated financial institutions, healthcare systems, and professional services firms with complex internal control environments that require experienced audit leadership.
Are there remote senior level internal auditor jobs?
Yes, though availability varies by employer and industry. About 42% of senior level internal auditor openings are remote or hybrid as of July 2026, reflecting broader flexibility in audit functions that do not require on-site access to physical assets or restricted systems. Highly regulated industries and roles with significant stakeholder-facing responsibilities tend to favor hybrid or on-site arrangements.
What makes an internal auditor role senior level?
Senior level internal auditor roles are defined by ownership and scope rather than task execution. Professionals at this stage design and lead audit programs, assess enterprise-wide risk, and translate findings into actionable recommendations for senior management or audit committees. They are expected to mentor less experienced auditors, manage relationships with business unit leaders, and exercise independent judgment on complex or ambiguous control issues.
Which industries hire the most senior level internal auditors?
Senior level internal auditor roles concentrate in Banking & Financial Services, Investment & Asset Management, and Electronics & Hardware, based on current listings on Migrate Mate as of July 2026. These sectors drive hiring because of their regulatory complexity, large transaction volumes, and the governance demands that come with public reporting obligations or oversight from regulators requiring mature, well-staffed internal audit functions.